Vulnerabilities

TI-2013-03095 CVE-2013-3538 · GHSA-9h9f-5hm6-prqq

Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id_post or (2) pg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03247 Published 2013-05-13 No fix listed CWE-79

TI-2013-03094 CVE-2013-3537 · GHSA-w3gc-27mw-xwr6

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_post or (2) pg parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02224 Published 2013-05-13 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0…

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote…